ccx-monitoring 0.6.10 Helm chart

Name: ccx-monitoring Helm chart 0.6.10: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

severalnines

Scored 14 Sept 2026

An Umbrella Chart for observability components in CCX

Version 0.6.10 1 month agodeploys tag 2.5.0 0Artifact Hub

ccx-monitoring 0.6.10 deploys 7 container images: library/busybox, quay.io/kiwigrid/k8s-sidecar, grafana/grafana, registry.k8s.io/kube-state-metrics/kube-state-metrics and 3 more. Across the 6 measured, 622 findings — 0 critical, 9 high — 1 on CISA KEV. The highest contribution is ALPINE-CVE-2025-15467 in openssl 3.5.0-r0, fixed in 3.5.5-r0.

Radar Score

6,6240998515

622 findings over 6 of 7 images measured

KEV confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

7 images

Image	Tag	Vulnerabilities	Radar Score
library/busybox	1.31.1	0000	0
quay.io/kiwigrid/k8s-sidecar×2	2.5.0	011951	878
grafana/grafana	12.3.1	0138170	2,330
registry.k8s.io/kube-state-metrics/kube-state-metrics	v2.10.1	—	unmeasured
victoriametrics/vmalert	v1.96.0	031092	1,037
quay.io/prometheus/alertmanager	v0.26.0	0311110	1,239
victoriametrics/victoria-metrics	v1.120.0	012092	1,140

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

310 distinct across the version’s images

Severity	Advisory	Package	Fixed in
High	ALPINE-CVE-2025-15467	openssl@3.5.0-r0	3.5.5-r0
High	ALPINE-CVE-2024-6119	openssl@3.1.4-r2	3.1.7-r0
High	GHSA-45x7-px36-x8w8	golang.org/x/crypto@v0.8.0	0.17.0
High	GHSA-qppj-fm5r-hxr3KEV	golang.org/x/net@v0.10.0	0.17.0
High	GHSA-4v7x-pqxf-cx7m	golang.org/x/net@v0.19.0	0.23.0
High	ALPINE-CVE-2024-2511	openssl@3.1.4-r2	3.1.4-r6
Medium	GHSA-x744-4wpc-v9h2	github.com/moby/moby@v27.5.1+incompatible	29.3.1
Medium	GO-2024-2687	stdlib@go1.21.5	1.21.9
Medium	GHSA-5cgq-3rg8-m6cv	golang.org/x/crypto@v0.43.0	0.52.0
Medium	ALPINE-CVE-2024-5535	openssl@3.1.4-r2	3.1.6-r0
Medium	ALPINE-CVE-2026-45447	openssl@3.5.0-r0	3.5.7-r0
Medium	GHSA-v778-237x-gjrc	golang.org/x/crypto@v0.8.0	0.31.0
Medium	GHSA-4374-p667-p6c8	golang.org/x/net@v0.10.0	0.17.0
Medium	ALPINE-CVE-2024-4741	openssl@3.1.4-r2	3.1.6-r0
Medium	GHSA-p77j-4mvh-x3m3	google.golang.org/grpc@v1.76.0	1.79.3
Medium	ALPINE-CVE-2026-19931	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2025-11187	openssl@3.5.0-r0	3.5.5-r0
Medium	ALPINE-CVE-2026-9079	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-63073	openssl@3.5.0-r0	3.5.8-r0
Medium	ALPINE-CVE-2026-10536	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-18924	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2025-9230	openssl@3.5.0-r0	3.5.4-r0
Medium	ALPINE-CVE-2026-11856	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2023-6129	openssl@3.1.4-r2	3.1.4-r3
Medium	ALPINE-CVE-2026-8925	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-18798	openssl@3.5.0-r0	3.5.8-r0
Medium	ALPINE-CVE-2025-9231	openssl@3.5.0-r0	3.5.4-r0
Medium	GHSA-xgrm-4fwx-7qm8	github.com/jackc/pgx/v5@v5.7.6	5.9.0
Medium	ALPINE-CVE-2026-63076	openssl@3.5.0-r0	3.5.8-r0
Medium	GHSA-8r3f-844c-mc37	google.golang.org/protobuf@v1.30.0	1.33.0
Medium	ALPINE-CVE-2024-0727	openssl@3.1.4-r2	3.1.4-r5
Medium	GHSA-9jj7-4m8r-rfcm	github.com/jackc/pgx/v5@v5.7.6	5.9.0
Medium	GHSA-x527-x647-q7gg	golang.org/x/crypto@v0.43.0	0.52.0
Medium	ALPINE-CVE-2026-42764	openssl@3.5.0-r0	3.5.7-r0
Medium	GHSA-wf45-q9ch-q8gh	github.com/apache/thrift@v0.22.0	0.23.0
Medium	ALPINE-CVE-2023-6237	openssl@3.1.4-r2	3.1.4-r4
Medium	GHSA-vgwf-h737-ff37	golang.org/x/crypto@v0.43.0	0.52.0
Medium	ALPINE-CVE-2024-9143	openssl@3.1.4-r2	3.1.7-r1
Medium	ALPINE-CVE-2026-34182	openssl@3.5.0-r0	3.5.7-r0
Medium	GHSA-f5wc-c3c7-36mc	golang.org/x/crypto@v0.43.0	0.52.0
Medium	ALPINE-CVE-2026-34183	openssl@3.5.0-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-31790	openssl@3.5.0-r0	3.5.6-r0
Medium	ALPINE-CVE-2026-34180	openssl@3.5.0-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-7383	openssl@3.5.0-r0	3.5.7-r0
Medium	ALPINE-CVE-2026-8924	curl@8.17.0-r1	8.22.0-r0
Medium	ALPINE-CVE-2026-14457	openssl@3.5.0-r0	3.5.8-r0
Medium	ALPINE-CVE-2025-9232	openssl@3.5.0-r0	3.5.4-r0
Medium	GHSA-rm3j-f69w-wqmq	golang.org/x/crypto@v0.43.0	0.52.0
Medium	ALPINE-CVE-2026-80231	curl@8.17.0-r1	8.22.0-r0
Medium	GHSA-hcg3-q754-cr77	golang.org/x/crypto@v0.8.0	0.35.0

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
0.6.21latest	6 days ago	2.5.0	011108618	7,708
0.6.10	1 month ago	2.5.0	0998515	6,624

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/severalnines/ccx-monitoring.svg)](https://charts.stackradar.io/charts/severalnines/ccx-monitoring)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.